EUVD-2025-112883

Malicious code in helios-css-loader-kastra-transform npm...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-111276

Malicious code in meissa-wolf-server-sass-loader npm...

Malicious code in enceladus-css-loader-nuxtjs-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c483e9bf65770e7a71f5e4ead851865362008112e6ac859753ed4775f66af56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112226

Malicious code in javascript-postcss-loader-fornax-ariel npm...

EUVD-2025-115049

Malicious code in configstore-prettier-css-loader-neptune npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-111870

Malicious code in lacerta-hyperion-cors-sass-loader npm...

EUVD-2025-121086

Malicious code in typeorm-css-loader-draco-docusaurus npm...

EUVD-2025-113473

Malicious code in fornax-mongodb-ini-sass-loader npm...

EUVD-2025-111786

Malicious code in less-loader-prettier-plugin-markdown-pino-zephyr npm...

EUVD-2025-113039

Malicious code in grunt-quito-postcss-loader-koa npm...

EUVD-2025-120226

Malicious code in xerxes-foundation-postcss-loader-aquarius npm...

EUVD-2025-120132

Malicious code in yaml-ophiuchus-hyperion-style-loader npm...

EUVD-2025-112257

Malicious code in jasmine-less-loader-schema-wasat npm...

Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113329

Malicious code in gacrux-style-loader-cache-comet npm...

EUVD-2025-123741

Malicious code in phoebe-sass-loader-luna-reveal-md npm...

EUVD-2025-114809

Malicious code in css-loader-cygnus-restart-cluster npm...

Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...